diff --git a/hosts/nixos/configuration.nix b/hosts/nixos/configuration.nix
index 8a0b9c5..09ab43b 100644
--- a/hosts/nixos/configuration.nix
+++ b/hosts/nixos/configuration.nix
@@ -75,7 +75,7 @@
   users.users.homeserver = {
     isNormalUser = true;
     description = "home-server";
-    extraGroups = [ "networkmanager" "wheel" "docker" ];
+    extraGroups = [ "networkmanager" "wheel" "docker" "lxd" ];
     packages = with pkgs; [
       firefox
       #  thunderbird
@@ -120,7 +120,7 @@
   # networking.firewall.allowedTCPPorts = [ ... ];
   # networking.firewall.allowedUDPPorts = [ ... ];
   # Or disable the firewall altogether.
-  # networking.firewall.enable = false;
+  networking.firewall.enable = false;
 
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions
@@ -151,6 +151,10 @@
   virtualisation.docker = {
     enable = true;
   };
+  # LXD
+  virtualisation.lxd = {
+    enable = true;
+  };
 
   # Enable tailscale. We manually authenticate when we want with
   # "sudo tailscale up". If you don't use tailscale, you should comment